General

  • Target

    f7b1aaae018d5287444990606fc43a0f2deb4ac0c7b2712cc28331781d43ae27

  • Size

    55KB

  • Sample

    220616-t2rs7aafa6

  • MD5

    eca370e62443218965eb27b1a61bb7a0

  • SHA1

    4e48d0c38e0a4543137cd381abb38e6bd17f17aa

  • SHA256

    f7b1aaae018d5287444990606fc43a0f2deb4ac0c7b2712cc28331781d43ae27

  • SHA512

    6e0554a49c509a3c1c29f042746d18f924417692f3d4c2e8f55676bcc8bb7574ff3a8d4c131634601bd3da28c7c4ef4282c7002bb2a88a69c40e73aa23d58c81

Malware Config

Extracted

Family

recordbreaker

C2

http://51.195.166.201/

Targets

    • Target

      f7b1aaae018d5287444990606fc43a0f2deb4ac0c7b2712cc28331781d43ae27

    • Size

      55KB

    • MD5

      eca370e62443218965eb27b1a61bb7a0

    • SHA1

      4e48d0c38e0a4543137cd381abb38e6bd17f17aa

    • SHA256

      f7b1aaae018d5287444990606fc43a0f2deb4ac0c7b2712cc28331781d43ae27

    • SHA512

      6e0554a49c509a3c1c29f042746d18f924417692f3d4c2e8f55676bcc8bb7574ff3a8d4c131634601bd3da28c7c4ef4282c7002bb2a88a69c40e73aa23d58c81

    • RecordBreaker

      RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.

    • suricata: ET MALWARE Generic Stealer Config Download Request

      suricata: ET MALWARE Generic Stealer Config Download Request

    • suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

      suricata: ET MALWARE Recordbreaker Stealer CnC Checkin

MITRE ATT&CK Matrix

Tasks